RHSA-2026:70870
Vulnerability from csaf_redhat - Published: 2026-09-23 15:01 - Updated: 2026-09-24 04:20Summary
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.3
Severity
Important
Notes
Topic: Logging for Red Hat OpenShift - 6.5.3
Details: Red Hat OpenShift Logging 6.5.3 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in aws-smithy-json. This vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS) in smithy-rs generated servers. By sending a small HTTP request containing deeply nested JSON, the attacker can trigger uncontrolled recursion in the aws-smithy-json runtime, leading to stack exhaustion and a process abort. This can make the affected server unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple 'baggage' header lines. The system's independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le | — |
Vendor Fix
fix
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x | — |
Threats
Impact
Important
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le | — |
Vendor Fix
fix
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x | — |
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in the golang.org/x/image/tiff component. This vulnerability allows a remote attacker to cause a denial of service (DoS) by providing a specially crafted, invalid TIFF image. When the TIFF decoder attempts to process an image with an out-of-bounds strip offset, it can panic, leading to the unavailability of the affected system.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Moderate
A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-33818
Known not affected
30 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-33818
Known not affected
30 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-33818
Known not affected
30 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-33818
Known not affected
30 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-33818
Known not affected
30 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
References
196 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Logging for Red Hat OpenShift - 6.5.3",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Logging 6.5.3 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:70870",
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18140",
"url": "https://access.redhat.com/security/cve/CVE-2026-18140"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29181",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46600",
"url": "https://access.redhat.com/security/cve/CVE-2026-46600"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46604",
"url": "https://access.redhat.com/security/cve/CVE-2026-46604"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70870.json"
}
],
"title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.3",
"tracking": {
"current_release_date": "2026-09-24T04:20:53+00:00",
"generator": {
"date": "2026-09-24T04:20:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:70870",
"initial_release_date": "2026-09-23T15:01:55+00:00",
"revision_history": [
{
"date": "2026-09-23T15:01:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-23T15:01:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-24T04:20:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Logging Subsystem for Red Hat OpenShift 6.5",
"product": {
"name": "Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:6.5::el9"
}
}
}
],
"category": "product_family",
"name": "Logging Subsystem for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Abe174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1789659166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3Aa5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1789670843"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1789659145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1789659127"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1789736915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1789736807"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256%3A0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1789737942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Aa2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1789659121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1789659129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Acca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1789659541"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1789659166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1789659145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Acfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1789659127"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1789736915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ac2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1789736807"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1789659121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1789659129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Af0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1789659541"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Af3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1789659166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Ae72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1789659145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Aeb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1789659127"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1789736915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1789736807"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1789659121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Aa90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1789659129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Ad22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1789659541"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1789659166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Ae317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1789659145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Aea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1789659127"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1789736915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1789736807"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1789659121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1789659129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Af9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1789659541"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-18140",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-07-30T19:01:57.203369+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509566"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aws-smithy-json. This vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS) in smithy-rs generated servers. By sending a small HTTP request containing deeply nested JSON, the attacker can trigger uncontrolled recursion in the aws-smithy-json runtime, leading to stack exhaustion and a process abort. This can make the affected server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in the `aws-smithy-json` runtime crate allows a remote unauthenticated attacker to trigger a denial of service by sending a crafted HTTP request with deeply nested JSON. Red Hat products utilizing `smithy-rs` generated servers, such as components in Red Hat Enterprise Linux and Red Hat Trusted Artifact Signer, are susceptible to service disruption if exposed to untrusted networks.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18140"
},
{
"category": "external",
"summary": "RHBZ#2509566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509566"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18140"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18140",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18140"
},
{
"category": "external",
"summary": "https://aws.amazon.com/security/security-bulletins/2026-067-aws/",
"url": "https://aws.amazon.com/security/security-bulletins/2026-067-aws/"
},
{
"category": "external",
"summary": "https://crates.io/crates/aws-smithy-json/0.62.7",
"url": "https://crates.io/crates/aws-smithy-json/0.62.7"
},
{
"category": "external",
"summary": "https://github.com/smithy-lang/smithy-rs/security/advisories/GHSA-8ffr-xgwf-xj56",
"url": "https://github.com/smithy-lang/smithy-rs/security/advisories/GHSA-8ffr-xgwf-xj56"
}
],
"release_date": "2026-07-30T18:34:04.099000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "Restrict network access to services that process JSON input using the `aws-smithy-json` runtime. Configure firewalls to limit incoming connections to trusted sources, thereby reducing the exposure to remote unauthenticated denial of service attacks. If the service is reloaded or restarted, ensure firewall rules persist.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-29181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-07T21:01:21.484468+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456252"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple \u0027baggage\u0027 header lines. The system\u0027s independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting Red Hat Multicluster Engine for Kubernetes. A remote attacker can exploit this flaw by sending multiple crafted `baggage` HTTP header lines, leading to excessive CPU and memory consumption and potentially rendering services unavailable. This impact is significant due to the potential for widespread disruption in a multi-cluster environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "RHBZ#2456252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475"
}
],
"release_date": "2026-04-07T20:29:13.933000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers"
},
{
"cve": "CVE-2026-33818",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:12:37.151735+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "RHBZ#2515815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://go.dev/cl/814980",
"url": "https://go.dev/cl/814980"
},
{
"category": "external",
"summary": "https://go.dev/issue/80405",
"url": "https://go.dev/issue/80405"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5972",
"url": "https://pkg.go.dev/vuln/GO-2026-5972"
}
],
"release_date": "2026-08-13T21:58:52.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-41178",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T16:01:10.300537+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "RHBZ#2484830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
}
],
"release_date": "2026-06-04T14:38:23.707000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-46600",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-07-21T20:01:59.038876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504234"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46600"
},
{
"category": "external",
"summary": "RHBZ#2504234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504234"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600"
},
{
"category": "external",
"summary": "https://go.dev/cl/786345",
"url": "https://go.dev/cl/786345"
},
{
"category": "external",
"summary": "https://go.dev/issue/79795",
"url": "https://go.dev/issue/79795"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5942",
"url": "https://pkg.go.dev/vuln/GO-2026-5942"
}
],
"release_date": "2026-07-21T19:18:59.755000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing"
},
{
"cve": "CVE-2026-46604",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-06-26T21:05:50.463844+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493766"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the golang.org/x/image/tiff component. This vulnerability allows a remote attacker to cause a denial of service (DoS) by providing a specially crafted, invalid TIFF image. When the TIFF decoder attempts to process an image with an out-of-bounds strip offset, it can panic, leading to the unavailability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via invalid TIFF image",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the golang.org/x/image/tiff package. The TIFF decoder does not validate strip offsets read from a TIFF Image File Directory (IFD) before dereferencing them. Processing a specially crafted, invalid TIFF image with an out-of-bounds strip offset triggers a runtime panic, causing a denial of service in any application that decodes attacker-supplied TIFF images, such as thumbnail generators, document processors, or image upload handlers. Exploitation requires the application to decode a malicious TIFF file supplied by the attacker (CVSS UI:R); there is no impact to confidentiality or integrity, only availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46604"
},
{
"category": "external",
"summary": "RHBZ#2493766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493766"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46604",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46604"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46604",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46604"
},
{
"category": "external",
"summary": "https://go.dev/cl/788421",
"url": "https://go.dev/cl/788421"
},
{
"category": "external",
"summary": "https://go.dev/issue/80122",
"url": "https://go.dev/issue/80122"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5066",
"url": "https://pkg.go.dev/vuln/GO-2026-5066"
}
],
"release_date": "2026-06-26T20:22:46.377000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "There is no complete inline mitigation for this issue; the fix requires upgrading golang.org/x/image to version 0.43.0 or later, which validates the strip offset before use. Where an immediate upgrade is not possible, exposure can be reduced by not decoding untrusted or externally supplied TIFF images, or by isolating TIFF decoding in a sandboxed, restartable worker process so a panic does not crash the primary service.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via invalid TIFF image"
},
{
"cve": "CVE-2026-56853",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:14:53.561638+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515827"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "RHBZ#2515827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://go.dev/cl/795540",
"url": "https://go.dev/cl/795540"
},
{
"category": "external",
"summary": "https://go.dev/issue/80205",
"url": "https://go.dev/issue/80205"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6089",
"url": "https://pkg.go.dev/vuln/GO-2026-6089"
}
],
"release_date": "2026-08-13T21:58:53.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
},
{
"cve": "CVE-2026-56858",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-08-13T22:16:32.034590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515838"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "RHBZ#2515838",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://go.dev/cl/807100",
"url": "https://go.dev/cl/807100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80435",
"url": "https://go.dev/issue/80435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6091",
"url": "https://pkg.go.dev/vuln/GO-2026-6091"
}
],
"release_date": "2026-08-13T21:58:53.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
},
{
"cve": "CVE-2026-56859",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:16:52.493058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515840"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "RHBZ#2515840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://go.dev/cl/803320",
"url": "https://go.dev/cl/803320"
},
{
"category": "external",
"summary": "https://go.dev/issue/80481",
"url": "https://go.dev/issue/80481"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6088",
"url": "https://pkg.go.dev/vuln/GO-2026-6088"
}
],
"release_date": "2026-08-13T21:58:52.959000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
},
{
"cve": "CVE-2026-56860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:13:18.319384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "RHBZ#2515820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://go.dev/cl/803681",
"url": "https://go.dev/cl/803681"
},
{
"category": "external",
"summary": "https://go.dev/issue/80494",
"url": "https://go.dev/issue/80494"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6218",
"url": "https://pkg.go.dev/vuln/GO-2026-6218"
}
],
"release_date": "2026-08-13T21:58:53.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
},
{
"cve": "CVE-2026-56862",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-08-13T22:16:41.928450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "RHBZ#2515839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://go.dev/cl/804261",
"url": "https://go.dev/cl/804261"
},
{
"category": "external",
"summary": "https://go.dev/issue/80528",
"url": "https://go.dev/issue/80528"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6090",
"url": "https://pkg.go.dev/vuln/GO-2026-6090"
}
],
"release_date": "2026-08-13T21:58:53.216000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T15:01:55+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70870"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a5e092c0dbc40b85fd7a93328c798e4721e7c059fb30b470501371149294f9b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:822e29c6b0b68079a347949167ea267b0a8627d46c901bc3c4db535abe510e72_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:99d11f42d86d470e4c7d7e058414391e97dbd486b65f3be5632bb1b88792c71b_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:be174af030d4d5d34cf01da528d548caea0ff0ea4e14d1d92ad93b6714c3b96d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3eabde3d2da8cbc70ef0400d57d960d5dede80aab1d33ccf011eb5af08b9755_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4e36e066b35f44a54674984e22b185349bf3785e6f9bc86b569ebaa59dcbd2a2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:52ed6ebbde66a133f3e493de4e70f8dfd34a530821180433ccb53e3357bac655_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e317827dc1605cd47d546d144202dcd438d6d896dc555968aa898039a79ca7cd_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e72f4d0887e40b93bc90f7b4dfd11268ec89545c3ca88fb9f17e2b791d8e5655_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0b689d6bfec28d22e9bf20bead50162d42f86869535eda8f706ab7995b56506f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cfdd5a3a9f0155fc6e95e286aab35c3f5426831cc1e721c1db3dd52ba2a98472_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ea92dda5184757afd722a8bbec34228dd691657802c883c741c83b12a9669fda_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:eb39de1415d25f2d15c14d0535968ffbd2de47dcc76cbf59a223662933c72374_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1aff1edffe97335213aeb0f87488fe4b8f705963c606dab61706cda628ba7d7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2a2a0ebc791a8c6df0587901845d99af607fff15a16f34d44d60246a1edc46ab_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f527e14b66008eadeb6af9f8a879e7b9e27dc57a5df00dd14d4f010f411cfc2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:7edd996585ced7980c0361d170e4609847beee3576876d587a27af3477ebe25d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:0351f0ff2bb2b848082254b9dfab95104c36cbfa918ef5b8326da68c15a53d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:00feaaf029da12a09e28f196953423442e608cdcb5c75a507fe8c97dc662e183_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:716dc01dab13e4bedf7dd639d985d8514b1db4bc79467566da026b4279136c4a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:854701ce7fb777b8e7d0dead014dc85e8c162c4f0e573264b6dad3ebec46d763_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c2028d322147474bf38f74d341c0c5469e10b54c0dda1ea894b88bf59d9b478f_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:00105990cbeb225eaf1da878fc8dcb47325703191d1389096637ce9e32da13c1_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2db7aa5ecc046e77ea58de7968645f27727ebd04efe106064991b3ec78592b2d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:742550c2488970f3c86c0774d040d96c83e64bc3b78ba9be22355b3be7d5f692_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2637f8ba12b50ec71c24bb32a18dbaf9d2fb4c34c60ee131707a5fb2b204050_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:302a19cec76473554ec2157fc8cc6995eb53553954edab2c9d5dde7da36afb14_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:4c370fd40f050135ce34fd3b4975986c6010868027377a41c62760efddba0c40_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:545ba3142e245dcc9686d07ad3d5764922f408656ddb7ab7972decd85b3a9dc3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a90da3c5374e5fc8a22eb07525811c39a7931947c022d6b0fa2f7ed3fa7b0874_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:cca9d391f6e652dc4a5dad0184795a74a99e56a09f20cb9e3a0060b1f8ba6606_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d22c3d20198a32e0348f77462f9d33f1b1142b4f27a369b20909ab86af116a90_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f0ac7b1658e5895ad4715530b01591b8e9c20a8d34997f1bd97afa8736d0c9bf_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f9ce3dc12736c85705a7c06615830c5a931f4f610a697b16381d4ac15add56c4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…